lib/logstash/plugin_mixins/aws_config/generic.rb in logstash-mixin-aws-4.2.4 vs lib/logstash/plugin_mixins/aws_config/generic.rb in logstash-mixin-aws-4.3.0
- old
+ new
@@ -4,15 +4,15 @@
base.generic_aws_config
end
def generic_aws_config
# The AWS Region
- config :region, :validate => LogStash::PluginMixins::AwsConfig::REGIONS_ENDPOINT, :default => LogStash::PluginMixins::AwsConfig::US_EAST_1
+ config :region, :validate => :string, :default => LogStash::PluginMixins::AwsConfig::US_EAST_1
# This plugin uses the AWS SDK and supports several ways to get credentials, which will be tried in this order:
#
- # 1. Static configuration, using `access_key_id` and `secret_access_key` params in logstash plugin config
+ # 1. Static configuration, using `access_key_id` and `secret_access_key` params or `role_arn` in the logstash plugin config
# 2. External credentials file specified by `aws_credentials_file`
# 3. Environment variables `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`
# 4. Environment variables `AMAZON_ACCESS_KEY_ID` and `AMAZON_SECRET_ACCESS_KEY`
# 5. IAM Instance Profile (available when running inside EC2)
config :access_key_id, :validate => :string
@@ -23,9 +23,20 @@
# The AWS Session token for temporary credential
config :session_token, :validate => :password
# URI to proxy server if required
config :proxy_uri, :validate => :string
+
+ # Custom endpoint to connect to s3
+ config :endpoint, :validate => :string
+
+ # The AWS IAM Role to assume, if any.
+ # This is used to generate temporary credentials typically for cross-account access.
+ # See https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html for more information.
+ config :role_arn, :validate => :string
+
+ # Session name to use when assuming an IAM role
+ config :role_session_name, :validate => :string, :default => "logstash"
# Path to YAML file containing a hash of AWS credentials.
# This file will only be loaded if `access_key_id` and
# `secret_access_key` aren't set. The contents of the
# file should look like this: